{"identifier":"/us/usc/t15/s1681c\u20131","title":15,"num":"\u00a7\u202f1681c\u20131.","heading":"Identity theft prevention; fraud alerts and active duty alerts","text":"\u00a7\u202f1681c\u20131.\nIdentity theft prevention; fraud alerts and active duty alerts\n(a) One-call fraud alerts\n(1) Initial alerts\nUpon the direct request of a consumer, or an individual acting on behalf of or as a personal representative of a consumer, who asserts in good faith a suspicion that the consumer has been or is about to become a victim of fraud or related crime, including identity theft, a consumer reporting agency described in\nsection 1681a(p) of this title\n(A) include a fraud alert in the file of that consumer, and also provide that alert along with any credit score generated in using that file, for a period of not less than 1 year, beginning on the date of such request, unless the consumer or such representative requests that such fraud alert be removed before the end of such period, and the agency has received appropriate proof of the identity of the requester for such purpose; and\n(B) refer the information regarding the fraud alert under this paragraph to each of the other consumer reporting agencies described in\nsection 1681a(p) of this title\nsection 1681s(f) of this title\n(2) Access to free reports\nIn any case in which a consumer reporting agency includes a fraud alert in the file of a consumer pursuant to this subsection, the consumer reporting agency shall\u2014\n(A) disclose to the consumer that the consumer may request a free copy of the file of the consumer pursuant to\nsection 1681j(d) of this title\n(B) provide to the consumer all disclosures required to be made under\nsection 1681g of this title\n(b) Extended alerts\n(1) In general\nUpon the direct request of a consumer, or an individual acting on behalf of or as a personal representative of a consumer, who submits an identity theft report to a consumer reporting agency described in\nsection 1681a(p) of this title\n(A) include a fraud alert in the file of that consumer, and also provide that alert along with any credit score generated in using that file, during the 7-year period beginning on the date of such request, unless the consumer or such representative requests that such fraud alert be removed before the end of such period and the agency has received appropriate proof of the identity of the requester for such purpose;\n(B) during the 5-year period beginning on the date of such request, exclude the consumer from any list of consumers prepared by the consumer reporting agency and provided to any third party to offer credit or insurance to the consumer as part of a transaction that was not initiated by the consumer, unless the consumer or such representative requests that such exclusion be rescinded before the end of such period; and\n(C) refer the information regarding the extended fraud alert under this paragraph to each of the other consumer reporting agencies described in\nsection 1681a(p) of this title\nsection 1681s(f) of this title\n(2) Access to free reports\nIn any case in which a consumer reporting agency includes a fraud alert in the file of a consumer pursuant to this subsection, the consumer reporting agency shall\u2014\n(A) disclose to the consumer that the consumer may request 2 free copies of the file of the consumer pursuant to\nsection 1681j(d) of this title\n(B) provide to the consumer all disclosures required to be made under\nsection 1681g of this title\n(c) Active duty alerts\nUpon the direct request of an active duty military consumer, or an individual acting on behalf of or as a personal representative of an active duty military consumer, a consumer reporting agency described in\nsection 1681a(p) of this title\n(1) include an active duty alert in the file of that active duty military consumer, and also provide that alert along with any credit score generated in using that file, during a period of not less than 12 months, or such longer period as the Bureau shall determine, by regulation, beginning on the date of the request, unless the active duty military consumer or such representative requests that such fraud alert be removed before the end of such period, and the agency has received appropriate proof of the identity of the requester for such purpose;\n(2) during the 2-year period beginning on the date of such request, exclude the active duty military consumer from any list of consumers prepared by the consumer reporting agency and provided to any third party to offer credit or insurance to the consumer as part of a transaction that was not initiated by the consumer, unless the consumer requests that such exclusion be rescinded before the end of such period; and\n(3) refer the information regarding the active duty alert to each of the other consumer reporting agencies described in\nsection 1681a(p) of this title\nsection 1681s(f) of this title\n(d) Procedures\nEach consumer reporting agency described in\nsection 1681a(p) of this title\n(e) Referrals of alerts\nEach consumer reporting agency described in\nsection 1681a(p) of this title\n(1) paragraphs (1)(A) and (2) of subsection (a), in the case of a referral under subsection (a)(1)(B);\n(2) paragraphs (1)(A), (1)(B), and (2) of subsection (b), in the case of a referral under subsection (b)(1)(C); and\n(3) paragraphs (1) and (2) of subsection (c), in the case of a referral under subsection (c)(3).\n(f) Duty of reseller to reconvey alert\nA reseller shall include in its report any fraud alert or active duty alert placed in the file of a consumer pursuant to this section by another consumer reporting agency.\n(g) Duty of other consumer reporting agencies to provide contact information\nIf a consumer contacts any consumer reporting agency that is not described in\nsection 1681a(p) of this title\nsection 1681a(p) of this title\n(h) Limitations on use of information for credit extensions\n(1) Requirements for initial and active duty alerts\n(A) Notification\nEach initial fraud alert and active duty alert under this section shall include information that notifies all prospective users of a consumer report on the consumer to which the alert relates that the consumer does not authorize the establishment of any new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\n1\n1 See References in Text note below.\n(B) Limitation on users\n(i) In general\nNo prospective user of a consumer report that includes an initial fraud alert or an active duty alert in accordance with this section may establish a new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\n1\n(ii) Verification\nIf a consumer requesting the alert has specified a telephone number to be used for identity verification purposes, before authorizing any new credit plan or extension described in clause (i) in the name of such consumer, a user of such consumer report shall contact the consumer using that telephone number or take reasonable steps to verify the consumer\u2019s identity and confirm that the application for a new credit plan is not the result of identity theft.\n(2) Requirements for extended alerts\n(A) Notification\nEach extended alert under this section shall include information that provides all prospective users of a consumer report relating to a consumer with\u2014\n(i) notification that the consumer does not authorize the establishment of any new credit plan or extension of credit described in clause (i), other than under an open-end credit plan (as defined in section 1602(i)\n1\n(ii) a telephone number or other reasonable contact method designated by the consumer.\n(B) Limitation on users\nNo prospective user of a consumer report or of a credit score generated using the information in the file of a consumer that includes an extended fraud alert in accordance with this section may establish a new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\n1\n(i) National security freeze\n(1) Definitions\nFor purposes of this subsection:\n(A) The term \u201cconsumer reporting agency\u201d means a consumer reporting agency described in\nsection 1681a(p) of this title\n(B) The term \u201cproper identification\u201d has the meaning of such term as used under\nsection 1681h of this title\n(C) The term \u201csecurity freeze\u201d means a restriction that prohibits a consumer reporting agency from disclosing the contents of a consumer report that is subject to such security freeze to any person requesting the consumer report.\n(2) Placement of security freeze\n(A) In general\nUpon receiving a direct request from a consumer that a consumer reporting agency place a security freeze, and upon receiving proper identification from the consumer, the consumer reporting agency shall, free of charge, place the security freeze not later than\u2014\n(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 business day after receiving the request directly from the consumer; or\n(ii) in the case of a request that is by mail, 3 business days after receiving the request directly from the consumer.\n(B) Confirmation and additional information\nNot later than 5 business days after placing a security freeze under subparagraph (A), a consumer reporting agency shall\u2014\n(i) send confirmation of the placement to the consumer; and\n(ii) inform the consumer of\u2014\n(I) the process by which the consumer may remove the security freeze, including a mechanism to authenticate the consumer; and\n(II) the consumer\u2019s right described in\nsection 1681m(d)(1)(D) of this title\n(C) Notice to third parties\nA consumer reporting agency may advise a third party that a security freeze has been placed with respect to a consumer under subparagraph (A).\n(3) Removal of security freeze\n(A) In general\nA consumer reporting agency shall remove a security freeze placed on the consumer report of a consumer only in the following cases:\n(i) Upon the direct request of the consumer.\n(ii) The security freeze was placed due to a material misrepresentation of fact by the consumer.\n(B) Notice if removal not by request\nIf a consumer reporting agency removes a security freeze under subparagraph (A)(ii), the consumer reporting agency shall notify the consumer in writing prior to removing the security freeze.\n(C) Removal of security freeze by consumer request\nExcept as provided in subparagraph (A)(ii), a security freeze shall remain in place until the consumer directly requests that the security freeze be removed. Upon receiving a direct request from a consumer that a consumer reporting agency remove a security freeze, and upon receiving proper identification from the consumer, the consumer reporting agency shall, free of charge, remove the security freeze not later than\u2014\n(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 hour after receiving the request for removal; or\n(ii) in the case of a request that is by mail, 3 business days after receiving the request for removal.\n(D) Third-party requests\nIf a third party requests access to a consumer report of a consumer with respect to which a security freeze is in effect, where such request is in connection with an application for credit, and the consumer does not allow such consumer report to be accessed, the third party may treat the application as incomplete.\n(E) Temporary removal of security freeze\nUpon receiving a direct request from a consumer under subparagraph (A)(i), if the consumer requests a temporary removal of a security freeze, the consumer reporting agency shall, in accordance with subparagraph (C), remove the security freeze for the period of time specified by the consumer.\n(4) Exceptions\nA security freeze shall not apply to the making of a consumer report for use of the following:\n(A) A person or entity, or a subsidiary, affiliate, or agent of that person or entity, or an assignee of a financial obligation owed by the consumer to that person or entity, or a prospective assignee of a financial obligation owed by the consumer to that person or entity in conjunction with the proposed purchase of the financial obligation, with which the consumer has or had prior to assignment an account or contract including a demand deposit account, or to whom the consumer issued a negotiable instrument, for the purposes of reviewing the account or collecting the financial obligation owed for the account, contract, or negotiable instrument. For purposes of this subparagraph, \u201creviewing the account\u201d includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements.\n(B) Any Federal, State, or local agency, law enforcement agency, trial court, or private collection agency acting pursuant to a court order, warrant, or subpoena.\n(C) A child support agency acting pursuant to part D of title IV of the Social Security Act (\n42 U.S.C. 651\n(D) A Federal agency or a State or its agents or assigns acting to investigate fraud or acting to investigate or collect delinquent taxes or unpaid court orders or to fulfill any of its other statutory responsibilities, provided such responsibilities are consistent with a permissible purpose under\nsection 1681b of this title\n(E) By a person using credit information for the purposes described under\nsection 1681b(c) of this title\n(F) Any person or entity administering a credit file monitoring subscription or similar service to which the consumer has subscribed.\n(G) Any person or entity for the purpose of providing a consumer with a copy of the consumer\u2019s consumer report or credit score, upon the request of the consumer.\n(H) Any person using the information in connection with the underwriting of insurance.\n(I) Any person using the information for employment, tenant, or background screening purposes.\n(J) Any person using the information for assessing, verifying, or authenticating a consumer\u2019s identity for purposes other than the granting of credit, or for investigating or preventing actual or potential fraud.\n(5) Notice of rights\nAt any time a consumer is required to receive a summary of rights required under\nsection 1681g of this title\n\u201cConsumers Have the Right To Obtain a Security Freeze\n\u201cYou have a right to place a \u2018security freeze\u2019 on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. The security freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a security freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit.\n\u201cAs an alternative to a security freeze, you have the right to place an initial or extended fraud alert on your credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer\u2019s credit file. Upon seeing a fraud alert display on a consumer\u2019s credit file, a business is required to take steps to verify the consumer\u2019s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting 7 years.\n\u201cA security freeze does not apply to a person or entity, or its affiliates, or collection agencies acting on behalf of the person or entity, with which you have an existing account that requests information in your credit report for the purposes of reviewing or collecting the account. Reviewing the account includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements.\u201d.\n(6) Webpage\n(A) Consumer reporting agencies\nA consumer reporting agency shall establish a webpage that\u2014\n(i) allows a consumer to request a security freeze;\n(ii) allows a consumer to request an initial fraud alert;\n(iii) allows a consumer to request an extended fraud alert;\n(iv) allows a consumer to request an active duty fraud alert;\n(v) allows a consumer to opt-out of the use of information in a consumer report to send the consumer a solicitation of credit or insurance, in accordance with\nsection 1681m(d) of this title\n(vi) shall not be the only mechanism by which a consumer may request a security freeze.\n(B) FTC\nThe Federal Trade Commission shall establish a single webpage that includes a link to each webpage established under subparagraph (A) within the Federal Trade Commission\u2019s website www.Identitytheft.gov, or a successor website.\n(j) National protection for files and credit records of protected consumers\n(1) Definitions\nAs used in this subsection:\n(A) The term \u201cconsumer reporting agency\u201d means a consumer reporting agency described in\nsection 1681a(p) of this title\n(B) The term \u201cprotected consumer\u201d means an individual who is\u2014\n(i) under the age of 16 years at the time a request for the placement of a security freeze is made; or\n(ii) an incapacitated person or a protected person for whom a guardian or conservator has been appointed.\n(C) The term \u201cprotected consumer\u2019s representative\u201d means a person who provides to a consumer reporting agency sufficient proof of authority to act on behalf of a protected consumer.\n(D) The term \u201crecord\u201d means a compilation of information that\u2014\n(i) identifies a protected consumer;\n(ii) is created by a consumer reporting agency solely for the purpose of complying with this subsection; and\n(iii) may not be created or used to consider the protected consumer\u2019s credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living.\n(E) The term \u201csecurity freeze\u201d means a restriction that prohibits a consumer reporting agency from disclosing the contents of a consumer report that is the subject of such security freeze or, in the case of a protected consumer for whom the consumer reporting agency does not have a file, a record that is subject to such security freeze to any person requesting the consumer report for the purpose of opening a new account involving the extension of credit.\n(F) The term \u201csufficient proof of authority\u201d means documentation that shows a protected consumer\u2019s representative has authority to act on behalf of a protected consumer and includes\u2014\n(i) an order issued by a court of law;\n(ii) a lawfully executed and valid power of attorney;\n(iii) a document issued by a Federal, State, or local government agency in the United States showing proof of parentage, including a birth certificate; or\n(iv) with respect to a protected consumer who has been placed in a foster care setting, a written communication from a county welfare department or its agent or designee, or a county probation department or its agent or designee, certifying that the protected consumer is in a foster care setting under its jurisdiction.\n(G) The term \u201csufficient proof of identification\u201d means information or documentation that identifies a protected consumer and a protected consumer\u2019s representative and includes\u2014\n(i) a social security number or a copy of a social security card issued by the Social Security Administration;\n(ii) a certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate; or\n(iii) a copy of a driver\u2019s license, an identification card issued by the motor vehicle administration, or any other government issued identification.\n(2) Placement of security freeze for a protected consumer\n(A) In general\nUpon receiving a direct request from a protected consumer\u2019s representative that a consumer reporting agency place a security freeze, and upon receiving sufficient proof of identification and sufficient proof of authority, the consumer reporting agency shall, free of charge, place the security freeze not later than\u2014\n(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 business day after receiving the request directly from the protected consumer\u2019s representative; or\n(ii) in the case of a request that is by mail, 3 business days after receiving the request directly from the protected consumer\u2019s representative.\n(B) Confirmation and additional information\nNot later than 5 business days after placing a security freeze under subparagraph (A), a consumer reporting agency shall\u2014\n(i) send confirmation of the placement to the protected consumer\u2019s representative; and\n(ii) inform the protected consumer\u2019s representative of the process by which the protected consumer may remove the security freeze, including a mechanism to authenticate the protected consumer\u2019s representative.\n(C) Creation of file\nIf a consumer reporting agency does not have a file pertaining to a protected consumer when the consumer reporting agency receives a direct request under subparagraph (A), the consumer reporting agency shall create a record for the protected consumer.\n(3) Prohibition on release of record or file of protected consumer\nAfter a security freeze has been placed under paragraph (2)(A), and unless the security freeze is removed in accordance with this subsection, a consumer reporting agency may not release the protected consumer\u2019s consumer report, any information derived from the protected consumer\u2019s consumer report, or any record created for the protected consumer.\n(4) Removal of a protected consumer security freeze\n(A) In general\nA consumer reporting agency shall remove a security freeze placed on the consumer report of a protected consumer only in the following cases:\n(i) Upon the direct request of the protected consumer\u2019s representative.\n(ii) Upon the direct request of the protected consumer, if the protected consumer is not under the age of 16 years at the time of the request.\n(iii) The security freeze was placed due to a material misrepresentation of fact by the protected consumer\u2019s representative.\n(B) Notice if removal not by request\nIf a consumer reporting agency removes a security freeze under subparagraph (A)(iii), the consumer reporting agency shall notify the protected consumer\u2019s representative in writing prior to removing the security freeze.\n(C) Removal of freeze by request\nExcept as provided in subparagraph (A)(iii), a security freeze shall remain in place until a protected consumer\u2019s representative or protected consumer described in subparagraph (A)(ii) directly requests that the security freeze be removed. Upon receiving a direct request from the protected consumer\u2019s representative or protected consumer described in subparagraph (A)(ii) that a consumer reporting agency remove a security freeze, and upon receiving sufficient proof of identification and sufficient proof of authority, the consumer reporting agency shall, free of charge, remove the security freeze not later than\u2014\n(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 hour after receiving the request for removal; or\n(ii) in the case of a request that is by mail, 3 business days after receiving the request for removal.\n(D) Temporary removal of security freeze\nUpon receiving a direct request from a protected consumer or a protected consumer\u2019s representative under subparagraph (A)(i), if the protected consumer or protected consumer\u2019s representative requests a temporary removal of a security freeze, the consumer reporting agency shall, in accordance with subparagraph (C), remove the security freeze for the period of time specified by the protected consumer or protected consumer\u2019s representative.\n(k) Credit monitoring\n(1) Definitions\nIn this subsection:\n(A) The term \u201cactive duty military consumer\u201d includes a member of the National Guard.\n(B) The term \u201cNational Guard\u201d has the meaning given the term in\nsection 101(c) of title 10\n(2) Credit monitoring\nA consumer reporting agency described in\nsection 1681a(p) of this title\n(A) appropriate proof that the consumer is an active duty military consumer; and\n(B) contact information of the consumer.\n(3) Rulemaking\nNot later than 1 year after\nMay 24, 2018\n(A) a definition of an electronic credit monitoring service and material additions or modifications to the file of a consumer; and\n(B) what constitutes appropriate proof.\n(4) Applicability\n(A) Sections 1681n and 1681\no\n(B) This subsection shall be enforced exclusively under\nsection 1681s of this title","url":"https://projectusc.org/usc/t15/s1681c\u20131.html","content":[{"t":"sec","id":"/us/usc/t15/s1681c\u20131","children":[{"t":"num","text":"\u00a7\u202f1681c\u20131."},{"t":"heading","text":"Identity theft prevention; fraud alerts and active duty alerts"},{"t":"content","text":"\n","children":[{"t":"p","text":"(a) One-call fraud alerts","tail":"\n"},{"t":"p","text":"(1) Initial alerts","tail":"\n"},{"t":"p","text":"Upon the direct request of a consumer, or an individual acting on behalf of or as a personal representative of a consumer, who asserts in good faith a suspicion that the consumer has been or is about to become a victim of fraud or related crime, including identity theft, a consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" that maintains a file on the consumer and has received appropriate proof of the identity of the requester shall\u2014"}],"tail":"\n"},{"t":"p","text":"(A) include a fraud alert in the file of that consumer, and also provide that alert along with any credit score generated in using that file, for a period of not less than 1 year, beginning on the date of such request, unless the consumer or such representative requests that such fraud alert be removed before the end of such period, and the agency has received appropriate proof of the identity of the requester for such purpose; and","tail":"\n"},{"t":"p","text":"(B) refer the information regarding the fraud alert under this paragraph to each of the other consumer reporting agencies described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":", in accordance with procedures developed under "},{"t":"ref","text":"section 1681s(f) of this title","href":"/us/usc/t15/s1681s/f","tail":"."}],"tail":"\n"},{"t":"p","text":"(2) Access to free reports","tail":"\n"},{"t":"p","text":"In any case in which a consumer reporting agency includes a fraud alert in the file of a consumer pursuant to this subsection, the consumer reporting agency shall\u2014","tail":"\n"},{"t":"p","text":"(A) disclose to the consumer that the consumer may request a free copy of the file of the consumer pursuant to ","children":[{"t":"ref","text":"section 1681j(d) of this title","href":"/us/usc/t15/s1681j/d","tail":"; and"}],"tail":"\n"},{"t":"p","text":"(B) provide to the consumer all disclosures required to be made under ","children":[{"t":"ref","text":"section 1681g of this title","href":"/us/usc/t15/s1681g","tail":", without charge to the consumer, not later than 3 business days after any request described in subparagraph (A)."}],"tail":"\n"},{"t":"p","text":"(b) Extended alerts","tail":"\n"},{"t":"p","text":"(1) In general","tail":"\n"},{"t":"p","text":"Upon the direct request of a consumer, or an individual acting on behalf of or as a personal representative of a consumer, who submits an identity theft report to a consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" that maintains a file on the consumer, if the agency has received appropriate proof of the identity of the requester, the agency shall\u2014"}],"tail":"\n"},{"t":"p","text":"(A) include a fraud alert in the file of that consumer, and also provide that alert along with any credit score generated in using that file, during the 7-year period beginning on the date of such request, unless the consumer or such representative requests that such fraud alert be removed before the end of such period and the agency has received appropriate proof of the identity of the requester for such purpose;","tail":"\n"},{"t":"p","text":"(B) during the 5-year period beginning on the date of such request, exclude the consumer from any list of consumers prepared by the consumer reporting agency and provided to any third party to offer credit or insurance to the consumer as part of a transaction that was not initiated by the consumer, unless the consumer or such representative requests that such exclusion be rescinded before the end of such period; and","tail":"\n"},{"t":"p","text":"(C) refer the information regarding the extended fraud alert under this paragraph to each of the other consumer reporting agencies described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":", in accordance with procedures developed under "},{"t":"ref","text":"section 1681s(f) of this title","href":"/us/usc/t15/s1681s/f","tail":"."}],"tail":"\n"},{"t":"p","text":"(2) Access to free reports","tail":"\n"},{"t":"p","text":"In any case in which a consumer reporting agency includes a fraud alert in the file of a consumer pursuant to this subsection, the consumer reporting agency shall\u2014","tail":"\n"},{"t":"p","text":"(A) disclose to the consumer that the consumer may request 2 free copies of the file of the consumer pursuant to ","children":[{"t":"ref","text":"section 1681j(d) of this title","href":"/us/usc/t15/s1681j/d","tail":" during the 12-month period beginning on the date on which the fraud alert was included in the file; and"}],"tail":"\n"},{"t":"p","text":"(B) provide to the consumer all disclosures required to be made under ","children":[{"t":"ref","text":"section 1681g of this title","href":"/us/usc/t15/s1681g","tail":", without charge to the consumer, not later than 3 business days after any request described in subparagraph (A)."}],"tail":"\n"},{"t":"p","text":"(c) Active duty alerts","tail":"\n"},{"t":"p","text":"Upon the direct request of an active duty military consumer, or an individual acting on behalf of or as a personal representative of an active duty military consumer, a consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" that maintains a file on the active duty military consumer and has received appropriate proof of the identity of the requester shall\u2014"}],"tail":"\n"},{"t":"p","text":"(1) include an active duty alert in the file of that active duty military consumer, and also provide that alert along with any credit score generated in using that file, during a period of not less than 12 months, or such longer period as the Bureau shall determine, by regulation, beginning on the date of the request, unless the active duty military consumer or such representative requests that such fraud alert be removed before the end of such period, and the agency has received appropriate proof of the identity of the requester for such purpose;","tail":"\n"},{"t":"p","text":"(2) during the 2-year period beginning on the date of such request, exclude the active duty military consumer from any list of consumers prepared by the consumer reporting agency and provided to any third party to offer credit or insurance to the consumer as part of a transaction that was not initiated by the consumer, unless the consumer requests that such exclusion be rescinded before the end of such period; and","tail":"\n"},{"t":"p","text":"(3) refer the information regarding the active duty alert to each of the other consumer reporting agencies described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":", in accordance with procedures developed under "},{"t":"ref","text":"section 1681s(f) of this title","href":"/us/usc/t15/s1681s/f","tail":"."}],"tail":"\n"},{"t":"p","text":"(d) Procedures","tail":"\n"},{"t":"p","text":"Each consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" shall establish policies and procedures to comply with this section, including procedures that inform consumers of the availability of initial, extended, and active duty alerts and procedures that allow consumers and active duty military consumers to request initial, extended, or active duty alerts (as applicable) in a simple and easy manner, including by telephone."}],"tail":"\n"},{"t":"p","text":"(e) Referrals of alerts","tail":"\n"},{"t":"p","text":"Each consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" that receives a referral of a fraud alert or active duty alert from another consumer reporting agency pursuant to this section shall, as though the agency received the request from the consumer directly, follow the procedures required under\u2014"}],"tail":"\n"},{"t":"p","text":"(1) paragraphs (1)(A) and (2) of subsection (a), in the case of a referral under subsection (a)(1)(B);","tail":"\n"},{"t":"p","text":"(2) paragraphs (1)(A), (1)(B), and (2) of subsection (b), in the case of a referral under subsection (b)(1)(C); and","tail":"\n"},{"t":"p","text":"(3) paragraphs (1) and (2) of subsection (c), in the case of a referral under subsection (c)(3).","tail":"\n"},{"t":"p","text":"(f) Duty of reseller to reconvey alert","tail":"\n"},{"t":"p","text":"A reseller shall include in its report any fraud alert or active duty alert placed in the file of a consumer pursuant to this section by another consumer reporting agency.","tail":"\n"},{"t":"p","text":"(g) Duty of other consumer reporting agencies to provide contact information","tail":"\n"},{"t":"p","text":"If a consumer contacts any consumer reporting agency that is not described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" to communicate a suspicion that the consumer has been or is about to become a victim of fraud or related crime, including identity theft, the agency shall provide information to the consumer on how to contact the Bureau and the consumer reporting agencies described in "},{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" to obtain more detailed information and request alerts under this section."}],"tail":"\n"},{"t":"p","text":"(h) Limitations on use of information for credit extensions","tail":"\n"},{"t":"p","text":"(1) Requirements for initial and active duty alerts","tail":"\n"},{"t":"p","text":"(A) Notification","tail":"\n"},{"t":"p","text":"Each initial fraud alert and active duty alert under this section shall include information that notifies all prospective users of a consumer report on the consumer to which the alert relates that the consumer does not authorize the establishment of any new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\u202f","children":[{"t":"ref","text":"1"},{"t":"num","text":"1","tail":"\u202fSee References in Text note below."},{"t":"text","text":"\u202fSee References in Text note below.","tail":" of this title), in the name of the consumer, or issuance of an additional card on an existing credit account requested by a consumer, or any increase in credit limit on an existing credit account requested by a consumer, except in accordance with subparagraph (B)."}],"tail":"\n"},{"t":"p","text":"(B) Limitation on users","tail":"\n"},{"t":"p","text":"(i) In general","tail":"\n"},{"t":"p","text":"No prospective user of a consumer report that includes an initial fraud alert or an active duty alert in accordance with this section may establish a new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\u202f","children":[{"t":"text","text":"1","tail":" of this title), in the name of the consumer, or issue an additional card on an existing credit account requested by a consumer, or grant any increase in credit limit on an existing credit account requested by a consumer, unless the user utilizes reasonable policies and procedures to form a reasonable belief that the user knows the identity of the person making the request."}],"tail":"\n"},{"t":"p","text":"(ii) Verification","tail":"\n"},{"t":"p","text":"If a consumer requesting the alert has specified a telephone number to be used for identity verification purposes, before authorizing any new credit plan or extension described in clause (i) in the name of such consumer, a user of such consumer report shall contact the consumer using that telephone number or take reasonable steps to verify the consumer\u2019s identity and confirm that the application for a new credit plan is not the result of identity theft.","tail":"\n"},{"t":"p","text":"(2) Requirements for extended alerts","tail":"\n"},{"t":"p","text":"(A) Notification","tail":"\n"},{"t":"p","text":"Each extended alert under this section shall include information that provides all prospective users of a consumer report relating to a consumer with\u2014","tail":"\n"},{"t":"p","text":"(i) notification that the consumer does not authorize the establishment of any new credit plan or extension of credit described in clause (i), other than under an open-end credit plan (as defined in section 1602(i)\u202f","children":[{"t":"text","text":"1","tail":" of this title), in the name of the consumer, or issuance of an additional card on an existing credit account requested by a consumer, or any increase in credit limit on an existing credit account requested by a consumer, except in accordance with subparagraph (B); and"}],"tail":"\n"},{"t":"p","text":"(ii) a telephone number or other reasonable contact method designated by the consumer.","tail":"\n"},{"t":"p","text":"(B) Limitation on users","tail":"\n"},{"t":"p","text":"No prospective user of a consumer report or of a credit score generated using the information in the file of a consumer that includes an extended fraud alert in accordance with this section may establish a new credit plan or extension of credit, other than under an open-end credit plan (as defined in section 1602(i)\u202f","children":[{"t":"text","text":"1","tail":" of this title), in the name of the consumer, or issue an additional card on an existing credit account requested by a consumer, or any increase in credit limit on an existing credit account requested by a consumer, unless the user contacts the consumer in person or using the contact method described in subparagraph (A)(ii) to confirm that the application for a new credit plan or increase in credit limit, or request for an additional card is not the result of identity theft."}],"tail":"\n"},{"t":"p","text":"(i) National security freeze","tail":"\n"},{"t":"p","text":"(1) Definitions","tail":"\n"},{"t":"p","text":"For purposes of this subsection:","tail":"\n"},{"t":"p","text":"(A) The term \u201cconsumer reporting agency\u201d means a consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":"."}],"tail":"\n"},{"t":"p","text":"(B) The term \u201cproper identification\u201d has the meaning of such term as used under ","children":[{"t":"ref","text":"section 1681h of this title","href":"/us/usc/t15/s1681h","tail":"."}],"tail":"\n"},{"t":"p","text":"(C) The term \u201csecurity freeze\u201d means a restriction that prohibits a consumer reporting agency from disclosing the contents of a consumer report that is subject to such security freeze to any person requesting the consumer report.","tail":"\n"},{"t":"p","text":"(2) Placement of security freeze","tail":"\n"},{"t":"p","text":"(A) In general","tail":"\n"},{"t":"p","text":"Upon receiving a direct request from a consumer that a consumer reporting agency place a security freeze, and upon receiving proper identification from the consumer, the consumer reporting agency shall, free of charge, place the security freeze not later than\u2014","tail":"\n"},{"t":"p","text":"(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 business day after receiving the request directly from the consumer; or","tail":"\n"},{"t":"p","text":"(ii) in the case of a request that is by mail, 3 business days after receiving the request directly from the consumer.","tail":"\n"},{"t":"p","text":"(B) Confirmation and additional information","tail":"\n"},{"t":"p","text":"Not later than 5 business days after placing a security freeze under subparagraph (A), a consumer reporting agency shall\u2014","tail":"\n"},{"t":"p","text":"(i) send confirmation of the placement to the consumer; and","tail":"\n"},{"t":"p","text":"(ii) inform the consumer of\u2014","tail":"\n"},{"t":"p","text":"(I) the process by which the consumer may remove the security freeze, including a mechanism to authenticate the consumer; and","tail":"\n"},{"t":"p","text":"(II) the consumer\u2019s right described in ","children":[{"t":"ref","text":"section 1681m(d)(1)(D) of this title","href":"/us/usc/t15/s1681m/d/1/D","tail":"."}],"tail":"\n"},{"t":"p","text":"(C) Notice to third parties","tail":"\n"},{"t":"p","text":"A consumer reporting agency may advise a third party that a security freeze has been placed with respect to a consumer under subparagraph (A).","tail":"\n"},{"t":"p","text":"(3) Removal of security freeze","tail":"\n"},{"t":"p","text":"(A) In general","tail":"\n"},{"t":"p","text":"A consumer reporting agency shall remove a security freeze placed on the consumer report of a consumer only in the following cases:","tail":"\n"},{"t":"p","text":"(i) Upon the direct request of the consumer.","tail":"\n"},{"t":"p","text":"(ii) The security freeze was placed due to a material misrepresentation of fact by the consumer.","tail":"\n"},{"t":"p","text":"(B) Notice if removal not by request","tail":"\n"},{"t":"p","text":"If a consumer reporting agency removes a security freeze under subparagraph (A)(ii), the consumer reporting agency shall notify the consumer in writing prior to removing the security freeze.","tail":"\n"},{"t":"p","text":"(C) Removal of security freeze by consumer request","tail":"\n"},{"t":"p","text":"Except as provided in subparagraph (A)(ii), a security freeze shall remain in place until the consumer directly requests that the security freeze be removed. Upon receiving a direct request from a consumer that a consumer reporting agency remove a security freeze, and upon receiving proper identification from the consumer, the consumer reporting agency shall, free of charge, remove the security freeze not later than\u2014","tail":"\n"},{"t":"p","text":"(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 hour after receiving the request for removal; or","tail":"\n"},{"t":"p","text":"(ii) in the case of a request that is by mail, 3 business days after receiving the request for removal.","tail":"\n"},{"t":"p","text":"(D) Third-party requests","tail":"\n"},{"t":"p","text":"If a third party requests access to a consumer report of a consumer with respect to which a security freeze is in effect, where such request is in connection with an application for credit, and the consumer does not allow such consumer report to be accessed, the third party may treat the application as incomplete.","tail":"\n"},{"t":"p","text":"(E) Temporary removal of security freeze","tail":"\n"},{"t":"p","text":"Upon receiving a direct request from a consumer under subparagraph (A)(i), if the consumer requests a temporary removal of a security freeze, the consumer reporting agency shall, in accordance with subparagraph (C), remove the security freeze for the period of time specified by the consumer.","tail":"\n"},{"t":"p","text":"(4) Exceptions","tail":"\n"},{"t":"p","text":"A security freeze shall not apply to the making of a consumer report for use of the following:","tail":"\n"},{"t":"p","text":"(A) A person or entity, or a subsidiary, affiliate, or agent of that person or entity, or an assignee of a financial obligation owed by the consumer to that person or entity, or a prospective assignee of a financial obligation owed by the consumer to that person or entity in conjunction with the proposed purchase of the financial obligation, with which the consumer has or had prior to assignment an account or contract including a demand deposit account, or to whom the consumer issued a negotiable instrument, for the purposes of reviewing the account or collecting the financial obligation owed for the account, contract, or negotiable instrument. For purposes of this subparagraph, \u201creviewing the account\u201d includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements.","tail":"\n"},{"t":"p","text":"(B) Any Federal, State, or local agency, law enforcement agency, trial court, or private collection agency acting pursuant to a court order, warrant, or subpoena.","tail":"\n"},{"t":"p","text":"(C) A child support agency acting pursuant to part D of title IV of the Social Security Act (","children":[{"t":"ref","text":"42 U.S.C. 651","href":"/us/usc/t42/s651","tail":" et seq.)."}],"tail":"\n"},{"t":"p","text":"(D) A Federal agency or a State or its agents or assigns acting to investigate fraud or acting to investigate or collect delinquent taxes or unpaid court orders or to fulfill any of its other statutory responsibilities, provided such responsibilities are consistent with a permissible purpose under ","children":[{"t":"ref","text":"section 1681b of this title","href":"/us/usc/t15/s1681b","tail":"."}],"tail":"\n"},{"t":"p","text":"(E) By a person using credit information for the purposes described under ","children":[{"t":"ref","text":"section 1681b(c) of this title","href":"/us/usc/t15/s1681b/c","tail":"."}],"tail":"\n"},{"t":"p","text":"(F) Any person or entity administering a credit file monitoring subscription or similar service to which the consumer has subscribed.","tail":"\n"},{"t":"p","text":"(G) Any person or entity for the purpose of providing a consumer with a copy of the consumer\u2019s consumer report or credit score, upon the request of the consumer.","tail":"\n"},{"t":"p","text":"(H) Any person using the information in connection with the underwriting of insurance.","tail":"\n"},{"t":"p","text":"(I) Any person using the information for employment, tenant, or background screening purposes.","tail":"\n"},{"t":"p","text":"(J) Any person using the information for assessing, verifying, or authenticating a consumer\u2019s identity for purposes other than the granting of credit, or for investigating or preventing actual or potential fraud.","tail":"\n"},{"t":"p","text":"(5) Notice of rights","tail":"\n"},{"t":"p","text":"At any time a consumer is required to receive a summary of rights required under ","children":[{"t":"ref","text":"section 1681g of this title","href":"/us/usc/t15/s1681g","tail":", the following notice shall be included:"}],"tail":"\n"},{"t":"p","children":[{"t":"text","text":"\u201cConsumers Have the Right To Obtain a Security Freeze"}],"tail":"\n"},{"t":"p","text":"\u201cYou have a right to place a \u2018security freeze\u2019 on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. The security freeze is designed to prevent credit, loans, and services from being approved in your name without your consent. However, you should be aware that using a security freeze to take control over who gets access to the personal and financial information in your credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application you make regarding a new loan, credit, mortgage, or any other account involving the extension of credit.","tail":"\n"},{"t":"p","text":"\u201cAs an alternative to a security freeze, you have the right to place an initial or extended fraud alert on your credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer\u2019s credit file. Upon seeing a fraud alert display on a consumer\u2019s credit file, a business is required to take steps to verify the consumer\u2019s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is a fraud alert lasting 7 years.","tail":"\n"},{"t":"p","text":"\u201cA security freeze does not apply to a person or entity, or its affiliates, or collection agencies acting on behalf of the person or entity, with which you have an existing account that requests information in your credit report for the purposes of reviewing or collecting the account. Reviewing the account includes activities related to account maintenance, monitoring, credit line increases, and account upgrades and enhancements.\u201d.","tail":"\n"},{"t":"p","text":"(6) Webpage","tail":"\n"},{"t":"p","text":"(A) Consumer reporting agencies","tail":"\n"},{"t":"p","text":"A consumer reporting agency shall establish a webpage that\u2014","tail":"\n"},{"t":"p","text":"(i) allows a consumer to request a security freeze;","tail":"\n"},{"t":"p","text":"(ii) allows a consumer to request an initial fraud alert;","tail":"\n"},{"t":"p","text":"(iii) allows a consumer to request an extended fraud alert;","tail":"\n"},{"t":"p","text":"(iv) allows a consumer to request an active duty fraud alert;","tail":"\n"},{"t":"p","text":"(v) allows a consumer to opt-out of the use of information in a consumer report to send the consumer a solicitation of credit or insurance, in accordance with ","children":[{"t":"ref","text":"section 1681m(d) of this title","href":"/us/usc/t15/s1681m/d","tail":"; and"}],"tail":"\n"},{"t":"p","text":"(vi) shall not be the only mechanism by which a consumer may request a security freeze.","tail":"\n"},{"t":"p","text":"(B) FTC","tail":"\n"},{"t":"p","text":"The Federal Trade Commission shall establish a single webpage that includes a link to each webpage established under subparagraph (A) within the Federal Trade Commission\u2019s website www.Identitytheft.gov, or a successor website.","tail":"\n"},{"t":"p","text":"(j) National protection for files and credit records of protected consumers","tail":"\n"},{"t":"p","text":"(1) Definitions","tail":"\n"},{"t":"p","text":"As used in this subsection:","tail":"\n"},{"t":"p","text":"(A) The term \u201cconsumer reporting agency\u201d means a consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":"."}],"tail":"\n"},{"t":"p","text":"(B) The term \u201cprotected consumer\u201d means an individual who is\u2014","tail":"\n"},{"t":"p","text":"(i) under the age of 16 years at the time a request for the placement of a security freeze is made; or","tail":"\n"},{"t":"p","text":"(ii) an incapacitated person or a protected person for whom a guardian or conservator has been appointed.","tail":"\n"},{"t":"p","text":"(C) The term \u201cprotected consumer\u2019s representative\u201d means a person who provides to a consumer reporting agency sufficient proof of authority to act on behalf of a protected consumer.","tail":"\n"},{"t":"p","text":"(D) The term \u201crecord\u201d means a compilation of information that\u2014","tail":"\n"},{"t":"p","text":"(i) identifies a protected consumer;","tail":"\n"},{"t":"p","text":"(ii) is created by a consumer reporting agency solely for the purpose of complying with this subsection; and","tail":"\n"},{"t":"p","text":"(iii) may not be created or used to consider the protected consumer\u2019s credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living.","tail":"\n"},{"t":"p","text":"(E) The term \u201csecurity freeze\u201d means a restriction that prohibits a consumer reporting agency from disclosing the contents of a consumer report that is the subject of such security freeze or, in the case of a protected consumer for whom the consumer reporting agency does not have a file, a record that is subject to such security freeze to any person requesting the consumer report for the purpose of opening a new account involving the extension of credit.","tail":"\n"},{"t":"p","text":"(F) The term \u201csufficient proof of authority\u201d means documentation that shows a protected consumer\u2019s representative has authority to act on behalf of a protected consumer and includes\u2014","tail":"\n"},{"t":"p","text":"(i) an order issued by a court of law;","tail":"\n"},{"t":"p","text":"(ii) a lawfully executed and valid power of attorney;","tail":"\n"},{"t":"p","text":"(iii) a document issued by a Federal, State, or local government agency in the United States showing proof of parentage, including a birth certificate; or","tail":"\n"},{"t":"p","text":"(iv) with respect to a protected consumer who has been placed in a foster care setting, a written communication from a county welfare department or its agent or designee, or a county probation department or its agent or designee, certifying that the protected consumer is in a foster care setting under its jurisdiction.","tail":"\n"},{"t":"p","text":"(G) The term \u201csufficient proof of identification\u201d means information or documentation that identifies a protected consumer and a protected consumer\u2019s representative and includes\u2014","tail":"\n"},{"t":"p","text":"(i) a social security number or a copy of a social security card issued by the Social Security Administration;","tail":"\n"},{"t":"p","text":"(ii) a certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate; or","tail":"\n"},{"t":"p","text":"(iii) a copy of a driver\u2019s license, an identification card issued by the motor vehicle administration, or any other government issued identification.","tail":"\n"},{"t":"p","text":"(2) Placement of security freeze for a protected consumer","tail":"\n"},{"t":"p","text":"(A) In general","tail":"\n"},{"t":"p","text":"Upon receiving a direct request from a protected consumer\u2019s representative that a consumer reporting agency place a security freeze, and upon receiving sufficient proof of identification and sufficient proof of authority, the consumer reporting agency shall, free of charge, place the security freeze not later than\u2014","tail":"\n"},{"t":"p","text":"(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 business day after receiving the request directly from the protected consumer\u2019s representative; or","tail":"\n"},{"t":"p","text":"(ii) in the case of a request that is by mail, 3 business days after receiving the request directly from the protected consumer\u2019s representative.","tail":"\n"},{"t":"p","text":"(B) Confirmation and additional information","tail":"\n"},{"t":"p","text":"Not later than 5 business days after placing a security freeze under subparagraph (A), a consumer reporting agency shall\u2014","tail":"\n"},{"t":"p","text":"(i) send confirmation of the placement to the protected consumer\u2019s representative; and","tail":"\n"},{"t":"p","text":"(ii) inform the protected consumer\u2019s representative of the process by which the protected consumer may remove the security freeze, including a mechanism to authenticate the protected consumer\u2019s representative.","tail":"\n"},{"t":"p","text":"(C) Creation of file","tail":"\n"},{"t":"p","text":"If a consumer reporting agency does not have a file pertaining to a protected consumer when the consumer reporting agency receives a direct request under subparagraph (A), the consumer reporting agency shall create a record for the protected consumer.","tail":"\n"},{"t":"p","text":"(3) Prohibition on release of record or file of protected consumer","tail":"\n"},{"t":"p","text":"After a security freeze has been placed under paragraph (2)(A), and unless the security freeze is removed in accordance with this subsection, a consumer reporting agency may not release the protected consumer\u2019s consumer report, any information derived from the protected consumer\u2019s consumer report, or any record created for the protected consumer.","tail":"\n"},{"t":"p","text":"(4) Removal of a protected consumer security freeze","tail":"\n"},{"t":"p","text":"(A) In general","tail":"\n"},{"t":"p","text":"A consumer reporting agency shall remove a security freeze placed on the consumer report of a protected consumer only in the following cases:","tail":"\n"},{"t":"p","text":"(i) Upon the direct request of the protected consumer\u2019s representative.","tail":"\n"},{"t":"p","text":"(ii) Upon the direct request of the protected consumer, if the protected consumer is not under the age of 16 years at the time of the request.","tail":"\n"},{"t":"p","text":"(iii) The security freeze was placed due to a material misrepresentation of fact by the protected consumer\u2019s representative.","tail":"\n"},{"t":"p","text":"(B) Notice if removal not by request","tail":"\n"},{"t":"p","text":"If a consumer reporting agency removes a security freeze under subparagraph (A)(iii), the consumer reporting agency shall notify the protected consumer\u2019s representative in writing prior to removing the security freeze.","tail":"\n"},{"t":"p","text":"(C) Removal of freeze by request","tail":"\n"},{"t":"p","text":"Except as provided in subparagraph (A)(iii), a security freeze shall remain in place until a protected consumer\u2019s representative or protected consumer described in subparagraph (A)(ii) directly requests that the security freeze be removed. Upon receiving a direct request from the protected consumer\u2019s representative or protected consumer described in subparagraph (A)(ii) that a consumer reporting agency remove a security freeze, and upon receiving sufficient proof of identification and sufficient proof of authority, the consumer reporting agency shall, free of charge, remove the security freeze not later than\u2014","tail":"\n"},{"t":"p","text":"(i) in the case of a request that is by toll-free telephone or secure electronic means, 1 hour after receiving the request for removal; or","tail":"\n"},{"t":"p","text":"(ii) in the case of a request that is by mail, 3 business days after receiving the request for removal.","tail":"\n"},{"t":"p","text":"(D) Temporary removal of security freeze","tail":"\n"},{"t":"p","text":"Upon receiving a direct request from a protected consumer or a protected consumer\u2019s representative under subparagraph (A)(i), if the protected consumer or protected consumer\u2019s representative requests a temporary removal of a security freeze, the consumer reporting agency shall, in accordance with subparagraph (C), remove the security freeze for the period of time specified by the protected consumer or protected consumer\u2019s representative.","tail":"\n"},{"t":"p","text":"(k) Credit monitoring","tail":"\n"},{"t":"p","text":"(1) Definitions","tail":"\n"},{"t":"p","text":"In this subsection:","tail":"\n"},{"t":"p","text":"(A) The term \u201cactive duty military consumer\u201d includes a member of the National Guard.","tail":"\n"},{"t":"p","text":"(B) The term \u201cNational Guard\u201d has the meaning given the term in ","children":[{"t":"ref","text":"section 101(c) of title 10","href":"/us/usc/t10/s101/c","tail":"."}],"tail":"\n"},{"t":"p","text":"(2) Credit monitoring","tail":"\n"},{"t":"p","text":"A consumer reporting agency described in ","children":[{"t":"ref","text":"section 1681a(p) of this title","href":"/us/usc/t15/s1681a/p","tail":" shall provide a free electronic credit monitoring service that, at a minimum, notifies a consumer of material additions or modifications to the file of the consumer at the consumer reporting agency to any consumer who provides to the consumer reporting agency\u2014"}],"tail":"\n"},{"t":"p","text":"(A) appropriate proof that the consumer is an active duty military consumer; and","tail":"\n"},{"t":"p","text":"(B) contact information of the consumer.","tail":"\n"},{"t":"p","text":"(3) Rulemaking","tail":"\n"},{"t":"p","text":"Not later than 1 year after ","children":[{"t":"text","text":"May 24, 2018","tail":", the Federal Trade Commission shall promulgate regulations regarding the requirements of this subsection, which shall at a minimum include\u2014"}],"tail":"\n"},{"t":"p","text":"(A) a definition of an electronic credit monitoring service and material additions or modifications to the file of a consumer; and","tail":"\n"},{"t":"p","text":"(B) what constitutes appropriate proof.","tail":"\n"},{"t":"p","text":"(4) Applicability","tail":"\n"},{"t":"p","text":"(A) Sections 1681n and 1681","children":[{"t":"text","text":"o","tail":" of this title shall not apply to any violation of this subsection."}],"tail":"\n"},{"t":"p","text":"(B) This subsection shall be enforced exclusively under ","children":[{"t":"ref","text":"section 1681s of this title","href":"/us/usc/t15/s1681s","tail":" by the Federal agencies and Federal and State officials identified in that section."}],"tail":"\n"}]},{"t":"text","text":"\n"},{"t":"text","text":"\n"}]}]}